CVE-2025-15608: high-severity vulnerability in TP-Link Systems Inc. AX53 v1
Buffer Overflow in Network Probe Handling Function of TP-Link Archer AX53 + Archer AX55
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.7epss 0.6%
This vulnerability in AX53 v1, AX55 v4 and AX55 v4.6 results from insufficient input sanitization in the device’s probe handling logic, where unvalidated parameters can trigger a stack-based buffer overflow that causes the affected service to crash and, under specific conditions, may enable remote code execution through complex heap-spray techniques.
Successful exploitation may result in repeated service unavailability and, in certain scenarios, allow an attacker to gain control of the device.
CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
Affected products
TP-Link Systems Inc. · AX53 v1TP-Link Systems Inc. · AX55 v4TP-Link Systems Inc. · AX55 v4.6Related CVEs — TP-Link Systems Inc. AX53 v1
In the same product, most dangerous first.
References
https://www.tp-link.com/en/support/download/archer-ax53/v1/#Firmwarehttps://www.tp-link.com/en/support/download/archer-ax55/v4/https://www.tp-link.com/us/support/download/archer-ax55/v4.60/#Firmwarehttps://www.tp-link.com/us/support/download/archer-ax55/v4/#Firmwarehttps://www.tp-link.com/us/support/faq/5025/